CVE-2025-37739 f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in f2fs File System Vulnerabilities Four CVEs related to the f2fs file system have been published, addressing various vulnerabilities. The issues include out-of-bounds access, sanity checks on block counts, and segment allocation failures, affecting systems utilizing the f2fs file system. The vulnerabilities were published between May and July 2025, with patches announced on February 18, 2026. 14 sources 39